Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c9821b2-602d-4808-a33a-b2390c4ea020/cb6eb617-0bbe-30e3-b5b4-57836fcc5e67.roa
File:                     cb6eb617-0bbe-30e3-b5b4-57836fcc5e67.roa (raw, json)
Hash identifier:          39JvQxbAyZJzi+rDFXfvnxNYGl/UuRr7rkJGHYYiQZ8=
Subject key identifier:   DB:F8:4E:D8:1C:F6:AE:71:3A:F8:3C:05:00:33:D8:62:00:10:49:C5
Certificate issuer:       /CN=5c9821b2-602d-4808-a33a-b2390c4ea020
Certificate serial:       010D0C9F4328584A3A158FC29055D269FF1D3780
Authority key identifier: AF:66:D3:67:41:8C:19:F4:CC:35:CC:01:7B:B6:81:8F:8B:D7:4E:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c9821b2-602d-4808-a33a-b2390c4ea020.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c9821b2-602d-4808-a33a-b2390c4ea020/cb6eb617-0bbe-30e3-b5b4-57836fcc5e67.roa
Signing time:             Wed 18 Jun 2025 01:00:50 +0000
ROA not before:           Wed 18 Jun 2025 01:00:50 +0000
ROA not after:            Tue 16 Sep 2025 01:00:50 +0000
asID:                     46829
IP address blocks:        208.75.132.0/22 maxlen: 22
                          208.75.132.0/23 maxlen: 23
                          208.75.132.0/24 maxlen: 24
                          208.75.133.0/24 maxlen: 24
                          208.75.134.0/23 maxlen: 23
                          208.75.134.0/24 maxlen: 24
                          208.75.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c9821b2-602d-4808-a33a-b2390c4ea020/5c9821b2-602d-4808-a33a-b2390c4ea020.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c9821b2-602d-4808-a33a-b2390c4ea020/5c9821b2-602d-4808-a33a-b2390c4ea020.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c9821b2-602d-4808-a33a-b2390c4ea020.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3a:15:8f:c2:90:55:d2:69:ff:1d:37:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c9821b2-602d-4808-a33a-b2390c4ea020
        Validity
            Not Before: Jun 18 01:00:50 2025 GMT
            Not After : Sep 16 01:00:50 2025 GMT
        Subject: CN=0d09bd18-d6a6-46d0-a078-d6792a31bbf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:3e:58:9b:b0:f4:a8:1a:86:e5:12:f5:25:95:
                    eb:da:86:2d:bb:0e:71:08:6e:83:f1:08:2c:4e:bb:
                    f7:c1:cd:f8:87:aa:82:e6:9c:df:74:49:60:81:79:
                    8b:22:fc:1d:5e:2e:b1:7f:cf:c3:b8:b2:40:04:08:
                    84:5d:51:44:43:b4:72:60:33:65:b9:17:7b:0e:3b:
                    06:e8:33:c4:2c:ae:02:c0:e1:a5:c4:fc:7f:cf:ef:
                    7f:d6:fd:d7:62:3d:b3:f6:bf:86:d7:da:76:ff:04:
                    ca:4a:30:c2:81:92:aa:fb:6f:74:bc:b3:f6:3f:49:
                    c5:8c:c9:42:a9:42:ac:97:94:ae:83:c1:ad:45:87:
                    56:1c:b7:fa:44:49:57:ff:9f:1c:d2:0a:4b:87:69:
                    a8:0a:4f:b2:38:c8:2a:e4:6e:97:f4:20:4a:45:35:
                    a4:f7:ad:66:8a:21:62:e7:d9:a7:78:88:46:2e:2b:
                    66:c0:74:5d:c9:89:21:bf:1b:7d:8b:8d:4d:2c:92:
                    bd:bd:3d:44:ba:e8:96:41:91:18:07:c6:5b:7c:85:
                    3e:0a:e4:53:1e:fb:65:8f:90:78:d4:c1:e9:d3:1b:
                    8c:10:0d:97:91:3a:45:bc:df:6a:94:d6:58:f1:6a:
                    64:93:77:2c:12:ff:b7:65:ea:de:68:23:39:f1:3b:
                    5a:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:F8:4E:D8:1C:F6:AE:71:3A:F8:3C:05:00:33:D8:62:00:10:49:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c9821b2-602d-4808-a33a-b2390c4ea020/cb6eb617-0bbe-30e3-b5b4-57836fcc5e67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c9821b2-602d-4808-a33a-b2390c4ea020/5c9821b2-602d-4808-a33a-b2390c4ea020.crl

            X509v3 Authority Key Identifier:
                keyid:AF:66:D3:67:41:8C:19:F4:CC:35:CC:01:7B:B6:81:8F:8B:D7:4E:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c9821b2-602d-4808-a33a-b2390c4ea020.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.75.132.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:91:6e:8a:65:64:53:60:bb:f2:87:75:36:fb:71:93:42:b5:
         59:42:f8:b8:4b:54:c0:fb:e5:0c:0b:b6:e9:cb:e2:fb:99:55:
         9d:e4:ec:2f:55:51:cc:d8:d2:d0:06:aa:ed:33:fb:7c:93:99:
         b6:f9:83:46:a3:55:1b:2b:d7:25:d2:b3:a1:3c:99:6c:66:d1:
         51:46:22:f6:12:c0:c0:ac:93:58:b4:30:29:bc:97:f5:94:8a:
         e8:1c:da:78:2b:a5:97:4f:e7:21:4c:d2:7d:70:e6:db:ae:ec:
         70:af:b5:b6:e7:6b:12:6a:21:0c:83:da:a3:b6:bd:09:5f:f3:
         e9:a1:4f:92:62:17:8e:a8:61:0b:11:1f:ba:fc:5a:89:94:44:
         ac:82:81:82:0a:1d:27:53:1e:19:ce:a9:6e:b7:d7:86:47:f8:
         04:95:94:da:6f:aa:52:7d:fc:a5:60:e9:0b:a9:3c:62:da:1b:
         09:30:aa:5a:4a:f4:a3:60:88:09:4e:db:96:67:1e:c6:c5:12:
         1d:6c:3b:c9:70:53:72:42:53:7d:92:17:ca:19:68:41:3e:ae:
         e0:39:81:d7:51:f4:13:fc:af:15:b1:34:c5:b5:88:92:d6:2d:
         f2:8c:c3:6a:e1:db:51:bd:6c:b8:83:46:37:77:fe:39:cb:4f:
         0b:81:b6:e1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo6FY/CkFXSaf8dN4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM5ODIxYjItNjAyZC00ODA4LWEzM2EtYjIzOTBjNGVh
MDIwMB4XDTI1MDYxODAxMDA1MFoXDTI1MDkxNjAxMDA1MFowLzEtMCsGA1UEAxMk
MGQwOWJkMTgtZDZhNi00NmQwLWEwNzgtZDY3OTJhMzFiYmY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsj5Ym7D0qBqG5RL1JZXr2oYtuw5xCG6D8Qgs
Trv3wc34h6qC5pzfdElggXmLIvwdXi6xf8/DuLJABAiEXVFEQ7RyYDNluRd7DjsG
6DPELK4CwOGlxPx/z+9/1v3XYj2z9r+G19p2/wTKSjDCgZKq+290vLP2P0nFjMlC
qUKsl5Sug8GtRYdWHLf6RElX/58c0gpLh2moCk+yOMgq5G6X9CBKRTWk961miiFi
59mneIhGLitmwHRdyYkhvxt9i41NLJK9vT1EuuiWQZEYB8ZbfIU+CuRTHvtlj5B4
1MHp0xuMEA2XkTpFvN9qlNZY8Wpkk3csEv+3ZereaCM58Tta+QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNv4Ttgc9q5xOvg8BQAz2GIAEEnFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS81Yzk4
MjFiMi02MDJkLTQ4MDgtYTMzYS1iMjM5MGM0ZWEwMjAvY2I2ZWI2MTctMGJiZS0z
MGUzLWI1YjQtNTc4MzZmY2M1ZTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNWM5ODIxYjItNjAyZC00ODA4LWEz
M2EtYjIzOTBjNGVhMDIwLzVjOTgyMWIyLTYwMmQtNDgwOC1hMzNhLWIyMzkwYzRl
YTAyMC5jcmwwHwYDVR0jBBgwFoAUr2bTZ0GMGfTMNcwBe7aBj4vXToUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS81Yzk4MjFiMi02MDJkLTQ4MDgtYTMzYS1iMjM5
MGM0ZWEwMjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0EuEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAL2RboplZFNgu/KHdTb7cZNCtVlC+LhLVMD75QwLtunL4vuZVZ3k7C9V
UczY0tAGqu0z+3yTmbb5g0ajVRsr1yXSs6E8mWxm0VFGIvYSwMCsk1i0MCm8l/WU
iugc2ngrpZdP5yFM0n1w5tuu7HCvtbbnaxJqIQyD2qO2vQlf8+mhT5JiF46oYQsR
H7r8WomURKyCgYIKHSdTHhnOqW6314ZH+ASVlNpvqlJ9/KVg6QupPGLaGwkwqlpK
9KNgiAlO25ZnHsbFEh1sO8lwU3JCU32SF8oZaEE+ruA5gddR9BP8rxWxNMW1iJLW
LfKMw2rh21G9bLiDRjd3/jnLTwuBtuE=
-----END CERTIFICATE-----
Generated at Mon Jun 30 15:02:45 2025 by rpki-client